07-07-2015 01:38 AM
Hi,
I got a Site to Site VPN connection that works properly.
Extended Office does not have a static IP address so I used a connection profile "ExtOffice" on main site.
ASA on Extended Office has a certificate that match on this connection profile.
If there is no traffic on VPN, there is a timeout and VPN goes down.
Main site can't reconnect VPN because there is no IP address for extended office.
Extended Office can connect VPN without problem.
There is few traffic on this tunnel but we need main site to contact extended office.
How can I keep VPN up?
Thanks for your help,
Patrick
07-07-2015 02:36 AM
Hi Patrick,
Pls increase security-association time and life time value.
Regards,
Md Raza
07-07-2015 04:49 AM
Hi Md Raza,
Thanks for your quick answer.
This time cant be infinite.
I would like to keep connection as longer as possible even without traffic.
Is there a way on VPN configuration? (with keepalive)
Or should I use a script ping continuously from extended office?
Regards,
Patrick
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: